github-release-notes
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill uses a restricted set of read-only git commands to analyze project history and generate text-based release notes. It explicitly forbids file modifications and lacks network access capabilities.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted data from git logs and changelogs, the attack surface is safe because the skill has no dangerous capabilities and mandates a restricted markdown output format. (Ingestion points: git log and CHANGELOG.md; Boundary markers: fenced code block; Capability inventory: read-only git and file tools; Sanitization: none).
Audit Metadata